Your company has an EC2 Instance hosted in AWS. This EC2 Instance hosts an application. Currently, this application is experiencing several issues. You need to inspect the network packets to find what type of error is occurring. Which one of the below steps can help address this issue?

Answer options:

A.Use AWS CloudTrail to capture all data events.
B.Use a network monitoring tool provided by an AWS partner.
C.Use another instance. Setup a port to “promiscuous mode” and sniff the traffic to analyze the packets.
D.Use CloudWatch metric.

Answer – B
Since here you need to sniff the actual network packets, the ideal approach would be to use a network monitoring tool provided by an AWS partner.
Options A and D are incorrect because these services cannot be used for packet inspection.
Option C is incorrect because “promiscuous mode” is not supported in AWS.
For more information on the security capabilities, please visit the below URL:
https://aws.amazon.com/answers/networking/vpc-security-capabilities/